DevOps

Ensures each AWS Lambda function has its own dedicated IAM execution role, following the Principle of Least Privilege for better security isolation. Use this skill to audit and remediate shared roles across Lambda functions.

Verifies that Amazon CloudWatch Lambda Insights is enabled for AWS Lambda functions, providing enhanced monitoring, troubleshooting, and compliance with CIS AWS Compute benchmark 12.2.

Audits and enforces least-privilege IAM permissions for AWS Lambda functions, ensuring each function has only the minimal required access, in line with CIS benchmarks.

Audit and delete unattached AWS Elastic Network Interfaces (ENIs) to maintain a clean environment, reduce attack surface, and avoid hitting service limits.

Audit and remediate AWS Lambda functions to ensure they are not exposed to the public. Helps enforce CIS AWS Compute benchmark 12.6 by removing resource-based policies that allow anonymous invocation.

A security rule to identify and terminate EC2 instances that have been stopped for over 90 days, helping maintain CIS compliance and reduce cloud attack surface.

Growth Lab Onboarding audits and configures all Growth Lab dependencies through natural language, checking API keys, third-party CLIs, browsers, and login states, and reports what is ready, missing, optional, or bypassed for first-time setup, environment checks.

Architecture Design defines a system’s components, technology stack, data model, APIs, and deployment considerations. Use it when turning product requirements into an implementation-ready architecture and ADRs.

Worktree Isolation manages git worktree creation, isolation checks, and cleanup for parallel development. Use it when you need separate branch workspaces for feature work, testing, or merges.

Automatically identify and fix failing CI/CD workflows on the staging branch using the babysitter orchestration skill. Ideal for developers who want to quickly resolve pipeline failures without manual intervention.

Ktx installs and configures the open-source context layer for data agents. Use when an agent needs to add ktx to a project, connect data sources, install agent rules, ingest schema, or troubleshoot a local setup.

Spec Kitty Admin Dashboard opens the Spec Kitty dashboard and reports daemon metadata, URL, and status. Use it to validate the project, token, and daemon health, or to stop the daemon when needed.